Malware with a strong command-and-control network will be able to change the merchant.

Additionally, this blacklisting effect can be used strategically to target business you don't like by using the malware to perform a false-flag attack.